Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: k5lzAcEToTwfCavHylOnkkc5IeiDIaT7dlDUBEgpdH4=
Subject key identifier: DD:C4:73:C3:7E:24:0F:6E:5B:AC:6D:72:6E:E1:38:E1:4C:AA:5D:12
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 019EB76AABF6A047B58F412594174F95E416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 0BEA
Signing time: Thu 11 Jun 2026 16:01:21 +0000
Manifest this update: Thu 11 Jun 2026 16:01:21 +0000
Manifest next update: Fri 12 Jun 2026 16:01:21 +0000
Files and hashes: 1: TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa (hash: w4shAAAl4BC6mnnYlahv1hVwM6Z+ODkO+q4aaMk3Of8=)
2: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: OfUwWCNn2EYD12cRBoEllR01y905un32UrwK+uLYA4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:ab:f6:a0:47:b5:8f:41:25:94:17:4f:95:e4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Jun 11 16:01:21 2026 GMT
Not After : Jun 12 16:01:21 2026 GMT
Subject: CN=ddc473c37e240f6e5bac6d726ee138e14caa5d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9b:87:c8:ef:c7:f7:4d:5a:c5:a1:11:49:b3:
44:8a:5d:e6:a4:be:6f:20:67:d2:cc:85:97:b0:27:
e5:14:e3:8e:ad:2b:e8:2f:7b:a9:a5:27:28:7d:ca:
a0:77:30:7b:cf:6b:9a:1d:c2:c6:0d:20:80:a4:9c:
58:ab:a8:78:f7:77:6e:3b:33:ac:6b:30:b6:fe:02:
44:92:5c:0c:ae:7a:39:34:46:2a:17:a6:1f:9e:0d:
79:2a:01:6b:2f:05:6d:aa:61:31:c1:e8:27:ed:4b:
b2:da:b0:bc:b3:d7:8e:f8:56:36:7d:cd:97:8b:cf:
55:c0:10:a2:b5:c7:a4:0b:42:b1:76:cc:98:30:20:
c2:81:87:96:b4:85:fc:86:ba:f3:98:ad:5d:50:d6:
35:64:33:fa:13:6e:2b:0c:74:5b:58:86:fc:60:30:
b1:0e:c2:a8:0c:f6:33:05:69:c7:67:56:23:b3:f5:
3e:a4:1f:1e:4b:b7:69:53:b0:68:ac:cd:4f:8c:df:
d6:d1:a2:4a:97:df:55:35:dd:96:cf:f4:bb:02:75:
c1:7b:e8:69:22:52:0b:22:07:bf:80:f8:a3:bd:70:
71:85:f6:c6:91:4b:ec:2c:93:c2:53:92:f2:91:7c:
11:8d:cd:03:40:f1:36:ba:72:b4:b7:d9:17:48:e3:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:73:C3:7E:24:0F:6E:5B:AC:6D:72:6E:E1:38:E1:4C:AA:5D:12
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:62:07:73:26:79:88:25:c6:05:7f:86:8d:32:8e:77:2b:f7:
28:a8:eb:53:76:d0:de:55:62:8c:81:f2:f2:82:d5:65:6d:b9:
36:82:a5:7e:4b:f6:63:dd:29:81:b1:b9:37:01:bb:15:4f:76:
fa:19:ee:c7:fd:e1:d5:a6:a4:c4:af:b7:71:d1:e2:72:f9:d7:
86:f1:59:9c:f8:a0:10:f6:28:7e:8e:82:c8:f1:06:83:8a:fd:
5c:63:e3:9d:5d:cb:eb:ea:dd:6d:ac:e1:81:9a:d3:6e:1f:32:
1f:44:f7:bd:60:60:3a:8a:eb:cc:ac:e6:3e:40:10:a1:4a:73:
c5:21:48:22:3b:01:43:38:bd:7e:f9:2c:c4:ef:2c:2f:66:24:
57:12:26:37:77:ff:dc:06:9a:b9:a5:8f:f0:43:04:0b:32:ee:
d7:ff:30:d2:c1:b8:9b:5e:1f:ce:f9:90:8d:32:cb:b0:89:c9:
c4:e1:08:8b:45:51:b6:7c:ca:92:71:4e:4c:2b:5b:04:67:a3:
56:8d:24:86:e6:bc:12:4c:ff:c9:a3:b9:cd:cd:a1:14:61:72:
2b:e9:53:76:eb:35:91:96:7e:90:bc:4c:b1:6c:98:b7:79:31:
4d:b4:0c:07:7a:8c:02:5b:99:ce:fb:19:c3:5a:f7:51:92:96:
91:01:3d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:52 2026 by rpki-client